PT-2023-24993 · Unknown · Simplephpscripts Simple Blog
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
SimplePHPscripts Simple Blog version 3.2
Description
A vulnerability has been found in the file preview.php of the component URL Parameter Handler, which leads to cross site scripting. The attack can be launched remotely.
Recommendations
For version 3.2, it is recommended to upgrade the affected component. As a temporary workaround, consider restricting access to the preview.php file until a patch is available.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Simplephpscripts Simple Blog